https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323202#M8329 <P>Hi,</P> <P>You have to do following things:<BR /> 1. move old authentication.conf and LDAP.conf and openldap certs diretory to new server<BR /> 2. Just replace the hashed values with the plaintext password and copy that file over. The next time the Splunk instance starts, it will re-hash the password.</P> Tue, 27 Feb 2018 04:33:36 GMT p_gurav 2018-02-27T04:33:36Z https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323201#M8328 <P>I am trying to move master node to a different node.</P> <OL> <LI>Setup a new node.</LI> <LI>configured as master node.</LI> <LI>Modified server.conf similar to old master node for params except ssh key.</LI> <LI>Copied _cluster app from old node to new node.</LI> <LI>Restarted new master node</LI> </OL> <P>I am ready to point indexers and search nodes to new master node. </P> <P>Old master is configured for ldap auth. But even after restart the server is not working for ldap auth. Do I need to reconfigure ldap on new master ?. I see authentication.conf in _cluster</P> <P>Thanks,</P> <P>NP</P> Mon, 26 Feb 2018 21:19:43 GMT https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323201#M8328 nathanpaul8 2018-02-26T21:19:43Z https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323202#M8329 <P>Hi,</P> <P>You have to do following things:<BR /> 1. move old authentication.conf and LDAP.conf and openldap certs diretory to new server<BR /> 2. Just replace the hashed values with the plaintext password and copy that file over. The next time the Splunk instance starts, it will re-hash the password.</P> Tue, 27 Feb 2018 04:33:36 GMT https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323202#M8329 p_gurav 2018-02-27T04:33:36Z https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323203#M8330 <P>I tried the above and I get this error:<BR /> An error occurred completing this request: In handler 'LDAP-groups': strategy="###" Error binding to LDAP. reason="Invalid credentials".<BR /> While the old master node has the same credentials, the new master displays the above error.</P> <P>which field contains the hashed values? as I did not replace the values.<BR /> Under ldap.conf, both "TLS_CACERT" and "TLS_CACERTDIR" are commented and TLS_REQCERT is set to "never".<BR /> Could you please let me know what could be the reason.</P> Tue, 29 Sep 2020 18:17:15 GMT https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323203#M8330 basu42002 2020-09-29T18:17:15Z https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323204#M8331 <P>Got it, the credentials in binddnspassword replaced with plaintext password. Now able to login with Ldap credentials. Thank you p_gurav</P> Sat, 03 Mar 2018 01:04:52 GMT https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323204#M8331 basu42002 2018-03-03T01:04:52Z https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323205#M8332 <P>Happy to help!!! Requesting you to accept answer if its helpful.</P> Mon, 05 Mar 2018 09:51:13 GMT https://community.splunk.com/t5/Security/How-to-replace-master-node-with-ldap-reconfig-required/m-p/323205#M8332 p_gurav 2018-03-05T09:51:13Z